JA3 Fingerprints

You can find further information about the JA3 fingerprint 906004246f3ba5e755b043c057254a29, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:906004246f3ba5e755b043c057254a29
First seen:2018-03-11 08:25:38 UTC
Last seen:2018-04-14 00:59:16 UTC
Status:Blacklisted
Malware samples:170
Destination IPs:133
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2018-04-14 00:59:16d51a772f31ffe6046867ffdd2a9e97a8Virustotal results 40/68 (58.82%) 173.194.220.147:443
2018-04-14 00:59:16d51a772f31ffe6046867ffdd2a9e97a8Virustotal results 40/68 (58.82%) 64.233.162.104:443
2018-04-14 00:59:16d51a772f31ffe6046867ffdd2a9e97a8Virustotal results 40/68 (58.82%) 173.194.220.94:443
2018-04-14 00:59:16d51a772f31ffe6046867ffdd2a9e97a8Virustotal results 40/68 (58.82%) 64.233.162.94:443
2018-04-14 00:59:16d51a772f31ffe6046867ffdd2a9e97a8Virustotal results 40/68 (58.82%) 173.194.220.99:443
2018-04-13 21:38:55d7dd466784512bd4e0e0cf83bfb90e45Virustotal results 48/67 (71.64%) 173.194.222.99:443
2018-04-13 09:40:30e1a443ff663c0f75ce35533afc2982c8Virustotal results 12/65 (18.46%) 74.125.205.106:443
2018-04-13 09:40:30e1a443ff663c0f75ce35533afc2982c8Virustotal results 12/65 (18.46%) 64.233.162.94:443
2018-04-13 09:40:30e1a443ff663c0f75ce35533afc2982c8Virustotal results 12/65 (18.46%) 74.125.205.94:443
2018-04-13 09:40:30e1a443ff663c0f75ce35533afc2982c8Virustotal results 12/65 (18.46%) 64.233.162.147:443
2018-04-13 09:40:30e1a443ff663c0f75ce35533afc2982c8Virustotal results 12/65 (18.46%) 74.125.205.104:443
2018-04-12 23:14:28b6e6333e95aba0d845b3e92722d8b464Virustotal results 43/65 (66.15%) 173.194.221.147:443
2018-04-12 23:14:28b6e6333e95aba0d845b3e92722d8b464Virustotal results 43/65 (66.15%) 179.60.192.36:443
2018-04-12 23:14:28b6e6333e95aba0d845b3e92722d8b464Virustotal results 43/65 (66.15%) 172.217.13.228:443
2018-04-12 10:51:05b994137c4138e279331495fbe9b11233Virustotal results 20/67 (29.85%) 64.233.164.106:443
2018-04-12 01:52:02b32a55d26693c6c9fa732a84cd50accaVirustotal results 46/67 (68.66%) 173.255.204.90:443
2018-04-12 00:23:30b454de3696010873b63ed033f64e97dbVirustotal results 11/46 (23.91%) 64.233.165.106:443
2018-04-12 00:23:30b454de3696010873b63ed033f64e97dbVirustotal results 11/46 (23.91%) 64.233.165.94:443
2018-04-12 00:23:30b454de3696010873b63ed033f64e97dbVirustotal results 11/46 (23.91%) 64.233.162.94:443
2018-04-12 00:23:30b454de3696010873b63ed033f64e97dbVirustotal results 11/46 (23.91%) 64.233.162.103:443
2018-04-12 00:23:30b454de3696010873b63ed033f64e97dbVirustotal results 11/46 (23.91%) 64.233.165.103:443
2018-04-10 20:08:35d7feba0df94d3e721fa8c46a3a437921Virustotal results 38/63 (60.32%) 172.217.15.67:443
2018-04-10 20:08:35d7feba0df94d3e721fa8c46a3a437921Virustotal results 38/63 (60.32%) 64.233.161.147:443
2018-04-10 20:08:35d7feba0df94d3e721fa8c46a3a437921Virustotal results 38/63 (60.32%) 172.217.15.68:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 64.233.162.94:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 173.194.220.105:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 64.233.162.105:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 64.233.162.104:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 173.194.220.94:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 173.194.220.147:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 64.233.162.103:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 173.194.220.106:443
2018-04-10 19:28:14b4ecb57dd07f9ca72f448edeffdbde0eVirustotal results 34/68 (50.00%) 64.233.162.99:443
2018-04-10 19:19:11ed4740733417d0dc349b012de0ab4245Virustotal results 46/64 (71.88%) 172.217.15.68:443
2018-04-10 19:19:11ed4740733417d0dc349b012de0ab4245Virustotal results 46/64 (71.88%) 173.194.222.104:443
2018-04-10 19:15:58e4ba7610673b76090814109bce0c0652n/a173.194.222.94:443
2018-04-10 17:15:02bc9b2dbfe3b13eff179f73bcb77345b9Virustotal results 15/68 (22.06%) 64.233.162.94:443
2018-04-10 17:15:02bc9b2dbfe3b13eff179f73bcb77345b9Virustotal results 15/68 (22.06%) 74.125.205.99:443
2018-04-10 17:15:02bc9b2dbfe3b13eff179f73bcb77345b9Virustotal results 15/68 (22.06%) 74.125.205.94:443
2018-04-10 17:15:02bc9b2dbfe3b13eff179f73bcb77345b9Virustotal results 15/68 (22.06%) 64.233.162.103:443
2018-04-10 17:15:02bc9b2dbfe3b13eff179f73bcb77345b9Virustotal results 15/68 (22.06%) 74.125.205.103:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 64.233.164.94:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 64.233.164.104:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 173.194.222.94:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 173.194.222.103:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 173.194.222.105:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 173.194.222.147:443
2018-04-10 17:14:30d39dd93679df1c51ee2b64dfb2385a97Virustotal results 28/66 (42.42%) 64.233.164.106:443
2018-04-10 14:09:19d77537c2211d0f0b5fa687d214cc5a69Virustotal results 41/67 (61.19%) 173.194.220.103:443
2018-04-10 14:09:19d77537c2211d0f0b5fa687d214cc5a69Virustotal results 41/67 (61.19%) 64.233.161.94:443
2018-04-10 14:09:19d77537c2211d0f0b5fa687d214cc5a69Virustotal results 41/67 (61.19%) 173.194.220.94:443
2018-04-10 13:57:04d0ba7149c84bb3cb0b0ce42109b83b60Virustotal results 44/68 (64.71%) 64.233.162.94:443
2018-04-10 13:57:04d0ba7149c84bb3cb0b0ce42109b83b60Virustotal results 44/68 (64.71%) 216.58.218.227:443
2018-04-10 11:10:57e0476a7a3d0c013a0bc30a4c94576cdaVirustotal results 45/67 (67.16%) 216.58.218.227:443
2018-04-10 10:07:15e06dbe52a1816f36e9c7bca255335ab2Virustotal results 43/67 (64.18%) 64.233.162.103:443
2018-04-10 10:07:15e06dbe52a1816f36e9c7bca255335ab2Virustotal results 43/67 (64.18%) 216.58.218.228:443
2018-04-10 10:07:15e06dbe52a1816f36e9c7bca255335ab2Virustotal results 43/67 (64.18%) 216.58.218.227:443
2018-04-10 09:38:32d0c6826d2574f903451c2179ba991b19Virustotal results 44/67 (65.67%) 172.217.7.163:443
2018-04-10 09:38:32d0c6826d2574f903451c2179ba991b19Virustotal results 44/67 (65.67%) 173.194.222.94:443
2018-04-10 09:38:32d0c6826d2574f903451c2179ba991b19Virustotal results 44/67 (65.67%) 172.217.7.164:443
2018-04-10 09:38:32d0c6826d2574f903451c2179ba991b19Virustotal results 44/67 (65.67%) 173.194.222.147:443
2018-04-10 05:02:03b0b02a95e6aefd23aa4cc65948abc543Virustotal results 43/68 (63.24%) 94.130.146.216:443
2018-04-10 05:02:03b0b02a95e6aefd23aa4cc65948abc543Virustotal results 43/68 (63.24%) 23.72.114.241:443
2018-04-10 05:02:03b0b02a95e6aefd23aa4cc65948abc543Virustotal results 43/68 (63.24%) 104.20.53.57:443
2018-04-09 20:40:39dc75bd5ac480b8b293cb28086d16f6c3Virustotal results 13/68 (19.12%) 64.233.162.147:443
2018-04-09 20:40:39dc75bd5ac480b8b293cb28086d16f6c3Virustotal results 13/68 (19.12%) 64.233.165.94:443
2018-04-09 20:40:39dc75bd5ac480b8b293cb28086d16f6c3Virustotal results 13/68 (19.12%) 64.233.162.94:443
2018-04-09 16:53:11bb558ec021e8624fb305cf3e71503b66Virustotal results 39/58 (67.24%) 173.194.222.94:443
2018-04-09 16:53:11bb558ec021e8624fb305cf3e71503b66Virustotal results 39/58 (67.24%) 172.217.7.163:443
2018-04-09 11:28:28d486dc498b745eafb8dde26a060bf90dVirustotal results 46/66 (69.70%) 216.58.218.228:443
2018-04-09 01:27:49e2ed06a8293f8f1542b9b1d6f04a61d4n/a64.233.163.104:443
2018-04-09 01:27:49e2ed06a8293f8f1542b9b1d6f04a61d4n/a64.233.163.94:443
2018-04-09 01:27:49e2ed06a8293f8f1542b9b1d6f04a61d4n/a64.233.162.147:443
2018-04-09 01:27:49e2ed06a8293f8f1542b9b1d6f04a61d4n/a64.233.162.104:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 64.233.161.147:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 172.217.15.68:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 64.233.161.94:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 64.233.161.104:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 172.217.8.132:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 172.217.15.67:443
2018-04-08 19:36:57b0b5edaa387ee86d6e917347d5f53806Virustotal results 43/65 (66.15%) 64.233.161.105:443
2018-04-08 10:51:47bd52d9b421af62e1a82c054896ac2135Virustotal results 37/67 (55.22%) 64.233.163.105:443
2018-04-08 10:51:47bd52d9b421af62e1a82c054896ac2135Virustotal results 37/67 (55.22%) 64.233.163.94:443
2018-04-08 10:51:47bd52d9b421af62e1a82c054896ac2135Virustotal results 37/67 (55.22%) 173.194.221.94:443
2018-04-08 10:51:47bd52d9b421af62e1a82c054896ac2135Virustotal results 37/67 (55.22%) 64.233.163.103:443
2018-04-08 10:51:47bd52d9b421af62e1a82c054896ac2135Virustotal results 37/67 (55.22%) 64.233.163.106:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 173.194.222.94:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 173.194.222.105:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 172.217.7.131:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 172.217.7.132:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 172.217.5.227:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 172.217.5.228:443
2018-04-07 18:30:31b3de963f247ef4a5cc8f063d96ca4995Virustotal results 31/68 (45.59%) 173.194.222.103:443
2018-04-06 03:06:05e5ab71094e235ee73f0f9e8209fb3df8Virustotal results 44/67 (65.67%) 64.233.161.94:443
2018-04-06 03:06:05e5ab71094e235ee73f0f9e8209fb3df8Virustotal results 44/67 (65.67%) 172.217.7.131:443
2018-04-02 03:20:46eaa159a21ddaed43ab0152a6106936d9Virustotal results 23/67 (34.33%) 74.125.131.94:443
2018-04-02 03:20:46eaa159a21ddaed43ab0152a6106936d9Virustotal results 23/67 (34.33%) 64.233.163.94:443
2018-04-02 03:20:46eaa159a21ddaed43ab0152a6106936d9Virustotal results 23/67 (34.33%) 74.125.131.105:443
2018-04-02 03:20:46eaa159a21ddaed43ab0152a6106936d9Virustotal results 23/67 (34.33%) 64.233.163.99:443
2018-03-31 14:22:14e0b85a73f83575aed16e17cba4c9122fn/a64.233.164.106:443

# of entries: 100 (max: 100)